CVE-2017-9785

CVE-2017-9785 affects NancyFX Nancy (Csrf.cs) prior to 1.4.4 and 2.x prior to 2.0-dangermouse. It enables Remote Code Execution through deserialization of JSON data in a CSRF cookie. Root cause: unsafe deserialization in cookie handling. Impact: RCE with network access; high severity. Remediation...

CVE-2017-9785

Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie...

CVE-2017-9785: Deserialization of Untrusted Data

Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie...

PT-2017-19186

Name of the Vulnerable Software and Affected Versions NancyFX Nancy versions prior to 1.4.4 NancyFX Nancy versions 2.x prior to 2.0-dangermouse Description The issue allows for Remote Code Execution via Deserialization of JSON data in a CSRF Cookie, specifically affecting the Csrf.cs component...